CVE-2018-15761

🗓️ 19 Nov 2018 14:00:00Reported by dellType

Cloud Foundry UAA release, versions prior to v64.0, and UAA, versions prior to 4.23.0, contain a validation error allowing privilege escalation

Reporter	Title	Published	Views	Family All 12
IBM Security Bulletins	Security Bulletin: A Security Vulnerability affects IBM Cloud Private Cloud Foundry (CVE-2018-15761)	11 Feb 201919:25	–	ibm
Cloud Foundry	CVE-2018-15761: UAA Privilege Escalation \| Cloud Foundry	1 Nov 201800:00	–	cloudfoundry
CNVD	Cloud Foundry UAA release and UAA elevation of privilege vulnerabilities	20 Nov 201800:00	–	cnvd
Cvelist	CVE-2018-15761 UAA Privilege Escalation	19 Nov 201814:00	–	cvelist
EUVD	EUVD-2022-1946	3 Oct 202520:07	–	euvd
Github Security Blog	Cloud Foundry UAA Privilege Escalation	13 May 202201:34	–	github
NVD	CVE-2018-15761	19 Nov 201814:29	–	nvd
OSV	CVE-2018-15761	19 Nov 201814:29	–	osv
OSV	GHSA-292X-HJR8-226F Cloud Foundry UAA Privilege Escalation	13 May 202201:34	–	osv
Prion	Privilege escalation	19 Nov 201814:29	–	prion

NVD

Vulners

Node

pivotal_software cloud_foundry_uaaRange<4.23.0

pivotal_software cloudfoundry_uaa_releaseRange<64.0

[
  {
    "product": "UAA",
    "vendor": "Cloud Foundry",
    "versions": [
      {
        "lessThan": "4.23.0",
        "status": "affected",
        "version": "all versions",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "UAA Release",
    "vendor": "Cloud Foundry",
    "versions": [
      {
        "lessThan": "64.0",
        "status": "affected",
        "version": "all versions",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
cloudfoundry	www.cloudfoundry.org/blog/cve-2018-15761/

21 Nov 2024 03:51Current

8.7High risk

Vulners AI Score8.7

CVSS 26.5

CVSS 38.8 - 9.9

EPSS0.00503